Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
File:                     HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json)
Hash identifier:          m+XyUQbJz1UrxBDOiQOroeaqhjTBsQIM/qlNXgoBEUk=
Subject key identifier:   86:BB:7A:C7:0F:EB:84:B9:E1:8D:09:55:96:E3:BD:BA:51:0E:7A:2F
Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
Certificate issuer:       /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Certificate serial:       35B5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
Manifest number:          35B5
Signing time:             Thu 22 Oct 2026 14:22:34 +0000
Manifest this update:     Thu 22 Oct 2026 14:22:34 +0000
Manifest next update:     Thu 29 Oct 2026 14:22:34 +0000
Files and hashes:         1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: rcZlvVh2C2MA5eqWeDHHuML1cNP3WlyuB3dTj7rMDAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 14:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13749 (0x35b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
        Validity
            Not Before: Oct 22 14:22:34 2026 GMT
            Not After : Oct 29 14:22:34 2026 GMT
        Subject: CN=6ada1c2a-f49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:17:82:9f:ad:33:64:63:34:61:f9:1c:7b:46:
                    23:05:a6:79:9b:58:9f:fb:28:c2:c9:ad:20:d0:cf:
                    65:5b:c5:e2:20:12:7e:6b:0a:a7:c1:43:86:8a:5a:
                    f6:a8:77:1b:eb:0f:1e:2b:9a:93:b0:f4:f3:e0:fd:
                    5c:41:b1:24:90:6f:bd:6d:8b:c1:ec:95:9d:ec:2c:
                    dc:c0:0c:f0:2d:28:6e:51:bd:c9:99:71:45:f4:37:
                    6e:c5:5e:91:4a:e9:72:78:5d:38:3d:75:c2:da:ac:
                    b0:4e:c4:de:48:5c:e1:3c:5f:98:fd:48:57:c5:74:
                    89:c7:52:45:d8:ad:a9:e5:3a:84:c3:a9:55:87:9f:
                    d9:7c:c2:90:18:87:81:b8:13:23:58:0f:07:49:48:
                    67:69:99:c9:9d:0e:6c:8d:b4:9e:2f:45:55:63:ac:
                    3a:91:45:1a:0c:3c:a3:bc:ef:64:a5:1b:37:2f:89:
                    41:d2:1c:6f:db:4d:0d:a4:f7:0d:b1:cc:ac:da:b3:
                    7a:98:35:9c:c0:dc:57:fd:2c:f2:a9:d9:d3:94:f5:
                    b0:b3:2f:d6:64:55:4a:bd:eb:fc:a7:26:8e:08:62:
                    00:7e:83:62:21:3f:e2:40:74:6e:86:0d:c9:4e:6e:
                    30:de:e0:a5:72:d6:36:0c:ad:c3:0f:0d:25:cc:77:
                    64:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BB:7A:C7:0F:EB:84:B9:E1:8D:09:55:96:E3:BD:BA:51:0E:7A:2F
            X509v3 Authority Key Identifier:
                keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:cd:19:20:3e:10:61:ad:38:a5:92:d4:42:9c:ba:4c:98:29:
         8b:be:7a:71:73:c9:0c:fe:7f:e6:cd:4c:f9:d7:56:a1:8e:86:
         0e:ad:3d:87:2c:46:57:1e:ca:f2:68:8b:3f:74:07:30:ea:39:
         9c:a9:2f:ec:9f:9d:b2:16:92:92:b2:55:b3:b3:08:52:0e:23:
         90:3b:26:da:90:12:35:17:fd:c7:ce:cc:d3:f2:72:b2:df:fa:
         0a:5f:c6:6a:a0:86:66:c9:f9:d7:39:a4:15:6b:db:e2:7e:f2:
         d0:9e:35:bd:d8:dc:a2:2c:ed:58:db:05:bc:9a:2f:39:eb:7d:
         d7:c3:76:3f:f6:60:1d:c1:ff:a9:e7:1c:fe:4e:13:9f:c7:52:
         10:ec:dc:cc:e5:c4:a5:2d:67:10:10:d8:43:a2:1d:b2:2f:41:
         85:31:b0:16:ed:d5:d9:aa:77:8a:dc:35:f3:7e:b5:b4:84:7e:
         16:b5:0a:1d:90:22:63:12:75:db:83:f3:0d:27:75:36:dd:12:
         e1:4c:1d:86:7a:85:7b:f4:e2:96:39:9a:76:24:17:ec:a7:08:
         86:e3:5a:a1:1e:62:ad:da:de:ee:94:97:35:ad:36:14:59:8a:
         9c:d8:f9:50:d3:28:b8:b1:6f:b1:39:cd:f0:b3:7e:77:51:c7:
         9c:6b:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:27:55 2026 by rpki-client